Privacy

Personal data is collected via Verisure devices to ensure the functioning of the Services as well as to enable detection of alarm triggering events contributing to the security of the Business Customer and the safety of the individuals in the monitored premises.

Personal data collected during an on-going alarm triggering event may be shared with the Business Customer and/or Assigned Users in real time during an alarm triggering event in the Verisure App in case such technology settings are available to the Business Customer.

P ersonal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

The processing is based on Verisure’s legitimate interest to provide Services to the Business Customers and the Business Customer’s legitimate interest to ensure security of their premises (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s and the Business Customer’s legitimate interests outweigh the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Personal data collected during an on-going alarm triggering event are stored for a period of 90 days from the alarm triggering event unless the data is required under sub-section 4.3.

We process personal data to verify the cause of an alarm triggering event.

During the management of an alarm triggering event Verisure processes personal data and may for example:

- identify authorised persons detected in the monitored premises with the help of code words; and

- share personal data with a privacy security company, law enforcement or other emergency services.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises. The real-time monitoring during an alarm triggering event may entail that sensitive personal data such as signs of a natural person’s health condition appear in the content.

The processing is based on Verisure’s legitimate interest to provide Services to the Business Customers and the Business Customer’s legitimate interest to ensure security of their premises (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s and the Business Customer’s legitimate interests outweigh the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Sensitive personal data:

In the exceptional situations where health information or other sensitive personal data is processed during an on-going alarm triggering event, sensitive personal data may be processed based on the exemption relating to the vital interests of the data subject or another natural person (Article 9.2.c UK GDPR).

Personal data collected during an on-going alarm triggering event are stored for this purpose for a period of 90 days from the alarm triggering event unless the data is required under sub-section 4.3.

We follow up previously managed alarm triggering events by contacting the Business Customer to ensure that the management of the alarm triggering event was as efficient as possible and to receive information which could be relevant for any future alarm triggering events.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on Verisure’s legitimate interest to provide Services to the Business Customers and to follow-up and ensure as efficient provision of the Services as possible (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Personal data collected during an on-going alarm triggering event are stored for this purpose for a period of 90 days from the alarm triggering event unless the data is required under sub-section 4.3.

Other personal data is stored for a period of up to 90 days from the alarm triggering event unless the data is required under sub-section 4.3.

We process personal data to maintain our compliance with legal (consumer) obligations.

Past customer contact details as submitted originally for entering into the contract

The processing is necessary for Verisure’s compliance with legal obligations with customers (Article 6.1.c UK GDPR).

The personal data is retained for a period of up to 6 years after the termination of the contract.

We process personal data when we provide the support which is requested by the Business Customer relating to the contract, the Services or the technical functioning of the installation.

We also process personal data when we manage other requests, such as requests to exercise the rights of a data subject.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on Verisure’s legitimate interest to provide support to the Business Customers (Article 6.1.f UK GDPR).
Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is retained for the duration of the customer service matter and for a period of up to 90 days unless the data is required under sub-section 4.3.

To be able to provide the Business Customer with relevant information in case of insurance or other legal claims, we store personal data and the Business Customers’ requests in an archive with appropriate access restrictions.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on the Business Customer’s legitimate interest to have access to necessary information in order to handle insurance claims or other legal claims (Article 6.1.f UK GDPR).

Our assessment is that the Business Customer’s legitimate interests outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Once we remove the Business Customer’s personal data from the internal database available to the customer service agents, we maintain the personal data collected during an on-going alarm triggering event with accompanying details in an archive with appropriate access restrictions for a period of time to support customers where evidence is required for insurance or other claims based on what practically is deemed a reasonable timeline for receiving such inquiries from customers and the time needed for insurance companies to handle such claims.

Depending on the nature of the complaint, we may for example investigate how an alarm triggering event was handled to ensure it was properly conducted.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on Verisure’s legitimate interest to handle and investigate customer complaints (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

We maintain the personal data collected during the handling of a complaint for a period of 3 years from the date of settlement or closure of the complaint.

We may, when necessary, assist law enforcement or regulators in case a legal obligation to provide assistance applies or such cooperation is otherwise motivated and based on a formal and written request for information.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises.

Other information requested by law enforcement or regulator which Verisure must share or otherwise considers is necessary to share.

Processing is necessary to comply with a legal obligation (Article 6.1.c UK GDPR) or

The processing is based on Verisure’s legitimate interest to assist law enforcement or regulators in case they receive a formal and written request for information (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

For as long as is required under applicable law.

We perform analyses of previous alarm triggering events to ensure efficient and correct management of alarm triggering events.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises.

The processing is based on Verisure’s legitimate interest to investigate and ensure that the Services have been provided in the correct manner (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is processed for a period of up to 6 years after the termination of the contract.

We perform analyses of previous alarm triggering events to ensure efficient and correct management of alarm triggering events.

Any personal data used for the purpose of training Verisure’s personnel will be pseudonymised so that the natural persons are not identifiable to the personnel.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises in strongly pseudonymised format.

The processing is based on Verisure’s legitimate interest to train its personnel and thus ensure the highest possible level of Service (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is processed for a period of up to 6 years after the termination of the contract.

We process personal data to further develop our Services, for example by making our devices more precise, improving the customer experience etc.

Any personal data used for the purpose of developing Verisure’s Services will be pseudonymised so that the natural persons are not identifiable to personnel.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises in strongly pseudonymised format.

The processing is based on Verisure’s legitimate interest to develop their Services and thus ensure the highest possible level of Service (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is processed for a period of up to 6 years after the termination of the contract.

We may need to process personal data in order to comply with our legal obligations.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing of personal data is necessary for the performance of Verisure's legal obligations (Article 6.1.c UK GDPR)

The personal data is retained for as long as necessary to comply with the applicable legal obligation.

In the event that Verisure is restructured, e.g. split into several different businesses, or if a merger occurs, the new company may continue to use the personal data for the same purposes as we have stated in this Privacy Notice, unless you receive different information in connection with the restructuring or merger.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing is based on Verisure’s legitimate interest to enable a restructuring process or a merger (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

If Verisure ceases to exist through a merger, or in the event of restructuring, we will erase the personal data as long as the retention of such personal data is not required by law.

In other cases, your personal data will be processed in accordance with this Privacy Notice.

We may need to process your personal data in order to protect our legal interests in the event of a dispute, such as to establish, exercise or defend legal claims.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing is based on Verisure’s legitimate interest to protect our legal interests in the event of a dispute (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is retained for as long as they are needed to establish, exercise, or defend a legal claim, in any event, for a maximum of 6 years after the termination of the contract.

We process personal data to provide the Residential Customer with a quote and to enter into a contract with the Residential Customer.

Contact details of the Residential Customer such as name, telephone number, postal address, and email address.

Information which is necessary to provide a quote such as description of the Residential Customer’s property and number of Assigned Users in the household.

Payment related data such as the chosen method of payment.

Miscellaneous information which the Residential Customer provides us with, and which is relevant for the purpose of processing.

The processing is necessary for the performance of a contract with the Residential Customer (Article 6.1.b UK GDPR).

The personal data is retained for the duration of the contractual relationship with the Residential Customer and for a period of up to 6 years after the termination of the contract.

We may perform a high-level “soft” external credit check (through Equifax) of new Residential Customers.

These are ‘soft’ credit checks (i.e. the search will appear on your credit file but it will not impact your credit score).

During the credit score check, Verisure and Equifax act as independent data controllers. Copy of the Credit Reference Agency Information Notice (CRAIN) is available at www.equifax.co.uk/crain

Information included in the credit check report received from the credit check agency in relation to your financial standing based on publicly available data such as county court judgements and credit search history.

Information shared with the credit check agency, i.e. name and address.

The processing is based on your consent to secure payment for the Services when credit payment is chosen as the method of payment (Article 6.1.a UK GDPR).

The personal data is retained for the duration of the contractual relationship with the Residential Customer and for a period of up to 6 years after the termination of the contract.

We process personal data to administer our contract with the Residential Customer, for example to manage the installation profile, the user accounts and to process payments for the Services.

Where you opt for credit financing, we may share your information with credit financing companies such as HUMM and PAYPLANET who process your payment of our subscription fees and provide you with the requested credit facilities.

Contact details of the Residential Customer such as name, telephone number, postal address, and email address.

Information included in the contract and the underlying quote.

Payment related data such as your chosen method of payment, debit or credit card details, bank account number and other information related and necessary for processing payments.

Additional information which the Residential Customer provides us with which is relevant for the purpose of administrating the contracts, including payments.

The processing is necessary for the performance of a contract with the Residential Customer (Article 6.1.b UK GDPR).

The personal data is retained for the duration of the contractual relationship with the Residential Customer and for a period of up to 6 years after the termination of the contract.

We process personal data to be able to administer existing customers and reconnect to the installations once the customer relationship is renewed and the equipment needs to be reactivated.

Technical data such as signals as tamper, power restore, periodic test and loose internet connectivity, device/node id number and (past) customer contact details.

The processing is necessary for the commercial legitimate interest of Verisure to enable the device’s reconnection (Article 6.1.f UK GDPR).

The personal data is retained for a period of up to 6 years after the termination of the contract.

Personal data is collected via Verisure devices to ensure the functioning of the Services as well as to enable detection of alarm triggering events contributing to the safety and security of the Residential Customer and other individuals in the monitored premises.

Personal data collected during an on-going alarm triggering event may be shared with the Residential Customer and/or Assigned Users in real time during an alarm triggering event in the Verisure App in case such technology settings are available to the Residential Customer.

Depending on the devices and system installed at the monitored premises, Residential Customers may be able to use Verisure’s system to view and photograph/record the monitored premises.

Verisure processes Residential Customer’s requests to create videos and images through movement/ audio triggered recording, livestreaming, continuous recording and customer-initiated recording, in order to enable the devices to respond to these instructions. Verisure does not have access to these images/ video.

These images are stored in Residential Customer’s Amazon Web Services account according to the terms and conditions of their agreement with them. Verisure does not have access to this account.

These images could also be stored on an SD card inserted into the device. These SD cards are the Residential Customer’s property and responsibility. Verisure does not have access to the images on these SD cards.

Passive monitoring:

Signals from Verisure devices, such as status information indicating that the devices are connected and functioning, together with requests from Residential Customers regarding the creation of video and image captures.

Usage information, such as whether the Services are activated or not.

Active monitoring:

Personal data collected during an on-going alarm triggering event, such as pictures, video, and audio from the monitored premises.

The processing is based on Verisure’s legitimate interest to provide Services to the Residential Customers and the Residential Customer’s legitimate interest to ensure security of their home (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s and the Residential Customer’s legitimate interests outweigh the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Signals from Verisure devices and usage information are stored for a period of up to 90 days from the alarm triggering event unless the data is required under sub-section 8.3.

Personal data collected during an on-going alarm triggering event are stored for a period of 90 days from the alarm triggering unless the data is required under sub-section 8.3.

We process personal data to verify the cause of an alarm triggering event.

During the management of an alarm triggering event Verisure processes personal data and may for example:

- contact the Residential Customer or the Emergency contact;

- identify authorised persons detected in the monitored premises with the help of code words; and

- share personal data with a privacy security company, law enforcement or other emergency services.

Depending on the type of devices installed, Verisure process images and video recordings of the monitored premises. Image capture and video recording take place without storage. When an alarm is triggered, photos are shot from Verisure installed cameras and transmitted to Verisure's Alarm Receiving Centre ("the ARC"). Only certain Verisure employees have access to these images and if there is not an alarm trigger, it is not possible for Verisure employees to view the video/images from your camera.

In the event of an alarm triggering event, Verisure will record the Residential Customer’s GPS location to determine whether or not they are at the monitored premises at the time of the alarm.

Personal data collected during an on-going alarm triggering event, such as pictures, video and audio from the monitored premises. The real-time monitoring during an alarm triggering event may entail that sensitive personal data, such as signs of a natural person’s health condition appear in the content.

Information provided by the Residential Customer to allow efficient management of alarm triggering events , potentially including sensitive personal data, such as hearing disability of an Assigned User or other physical disabilities.

Property related data

Usage information, such as whether the Services are activated or not and by whom.

Contact details of the Residential Customer, Assigned Users or Emergency contacts such as name and telephone number.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on Verisure’s legitimate interest to provide Services to the Residential Customers and the Residential Customer’s legitimate interest to ensure security of their home (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s and the Residential Customer’s legitimate interests outweigh the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Sensitive personal data:

In the exceptional situations where health information or other sensitive personal data is processed during an on-going alarm triggering event, sensitive personal data may be processed based on the exemption relating to the vital interests of the data subject or another natural person (Article 9.2.c UK GDPR).

If the Residential Customer or an Assigned User determines that it is necessary for Verisure to be aware of information classified as sensitive personal data, processing of such sensitive personal data will take place based on the data subject’s explicit consent provided simultaneously with the provision of such information (Article 9.2.a UK GDPR).

Personal data collected during an on-going alarm triggering event are stored for this purpose for a period of 90 days from the alarm triggering event unless the data is required under sub-section 8.3.
Other personal data is stored for a period of up to 90 days from the alarm triggering event unless the data is required under sub-section 8.3.
Other personal data is stored for a period of up to 90 days from the alarm triggering event unless the data is required under sub-section 8.3.

We follow up previously managed alarm triggering events by contacting the Residential Customer to ensure that the management of the alarm triggering event was as efficient as possible and to receive information which could be relevant for any future alarm triggering events.

We may also offer additional or modified security services following an alarm triggering event.

All information which is processed for the purpose of managing the alarm triggering event (see purpose 2.2 ).

Miscellaneous Information and feedback received from the Residential Customer which is relevant for future management of alarm triggering events.

The processing is based on Verisure’s legitimate interest to provide Services to the Residential Customers and to follow-up and ensure as efficient provision of the Services as possible (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Personal data collected during an on-going alarm triggering event are stored for this purpose for a period of 90 days from the alarm triggering event unless the data is required under sub-section 8.3.

Other personal data is stored for a period of up to 90 days from the alarm triggering event unless the data is required under sub-section 8.3.

We process personal data to maintain our compliance with legal (consumer) obligations.

Past customer contact details as submitted originally for entering into the contract.

The processing is necessary for Verisure’s compliance with legal obligations with customers (Article 6.1.c UK GDPR).

The personal data is retained for a period of up to 6 years after the termination of the contract.

We process personal data when we provide the support which is requested by the Residential Customer relating to the contract, the Services or the technical functioning of the installation.

We process personal data to provide support in the event that an alarm is triggered by you or for routine service and maintenance purposes.

We also process personal data when we manage other requests, such as requests to exercise the rights of a data subject.

Depending on the customer request, any personal data processed for the purposes described in this Privacy Notice.

Miscellaneous information provided by the Residential Customer in connection with the customer service situation.

The processing is based on Verisure’s legitimate interest to provide support to the Residential Customers (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is retained for the duration of the customer service matter and for a period of up to 90 days unless the data is required under sub-section 8.3.

To be able to provide you with relevant information in case of insurance or other legal claims, we store personal data and the Residential Customers’ requests in an archive with appropriate access restrictions.

Personal data collected during an on-going alarm triggering event, such as pictures, video, and audio from the monitored premises.

Property related data

Usage information, such as whether the Services are activated or not and by whom.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on the Residential Customer’s legitimate interest to have access to necessary information in order to handle insurance claims or other legal claims (Article 6.1.f UK GDPR).

Our assessment is that the Residential Customer’s legitimate interests outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Once we remove the Residential Customer’s personal data from the internal database available to the customer service agents, we maintain the personal data collected during an on-going alarm triggering event with accompanying details in an archive with appropriate access restrictions for a period of time to support customers where evidence is required for insurance or other claims based on what practically is deemed a reasonable timeline for receiving such inquiries from customers and the time needed for insurance companies to handle such claims.

Depending on the nature of the complaint, we may for example investigate how an alarm triggering event was handled to ensure it was properly conducted.

Depending on the nature of the complaint, any necessary personal data processed for the purposes described in this Privacy Notice.

Information about the complaint and any additional information provided by the Residential Customer in relation to the management of the complaint.

The processing is based on Verisure’s legitimate interest to handle and investigate customer complaints (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

We maintain the personal data collected during the handling of a complaint for a period of 3 years from the date of settlement or closure of the complaint.

We may, when necessary, assist law enforcement or regulators where a legal obligation to provide assistance applies or such cooperation is otherwise motivated and based on a formal and written request for information.

Personal data collected during an on-going alarm triggering event, such as pictures, video and audio from the monitored premises.

Other information requested by law enforcement or a regulator which Verisure must share or otherwise considers is necessary to share.

Processing is necessary to comply with a legal obligation (Article 6.1.c UK GDPR) or

The processing is based on Verisure’s legitimate interest to assist law enforcement or regulators in case they receive a formal and written request for information (Article 6.1.f GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s or other affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

For as long as is required under applicable law.

We record incoming calls to our customer service for quality assurance purposes.

We also perform analyses of previous alarm triggering events and handling of customer complaints to ensure efficient and correct management of alarm triggering events.

Personal data processed for the purposes of (1) managing alarm triggering events ( see 2.2 ), (2) following up alarm triggering events ( see 2.3 ) and (3) handling customer complaints ( see 3.3 ).

Recorded phone calls.

The processing is based on Verisure’s legitimate interest to investigate and ensure that the Services have been provided in the correct manner (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s and other affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The recorded phone calls are stored for up to 6 months from the call between you and Verisure unless the data is required under sub-section 8.3.

Other personal data is processed for a period of up to 6 years after the termination of the contract.

We record incoming calls to our customer service for the training purposes.

We also perform analyses of previous alarm triggering events to train our personnel and thus ensure correct management of alarm triggering events.

Any personal data used for the purpose of training Verisure’s personnel will be pseudonymised so that the natural persons are not identifiable to personnel.

Personal data processed for the purposes of (1) managing alarm triggering events ( see 2.2 ), following up alarm triggering events ( see 2.3 ) and (3) handling customer complaints ( see 3.3 ) in pseudonymised format.

Recorded phone calls.

The processing is based on Verisure’s legitimate interest to train its personnel and thus ensure the highest possible level of Service (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s and other affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The recorded phone calls are stored for up to 6 months from the call between you and Verisure unless the data is required under sub-section 8.3.

Other personal data is processed for a period of up to 6 years after the termination of the contract.

We process personal data to further develop our Services, for example by making our devices more precise, improving the customer experience etc.

We record incoming calls to our customer service. We also perform analyses of previous alarm triggering events.

Any personal data used for the purpose of developing Verisure’s Services will be pseudonymised so that the natural persons are not identifiable to personnel.

Personal data processed for the purposes of (1) managing alarm triggering events ( see 2.2 ), following up alarm triggering events ( see 2.3 ) and (3) handling customer complaints ( see 3.3 ) in pseudonymised format.

Recorded phone calls.

The processing is based on Verisure’s legitimate interest to develop Verisure’s services thus ensure the highest possible level of Service (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s and other affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The recorded phone calls are stored for up to 6 months from the call between you and Verisure unless the data is required under sub-section 8.3.

Other personal data is processed for a period of up to 6 years after the termination of the contract.

We process personal data to provide certain services online or through mobile devices and to provide information through so-called push messages (e.g., status messages about the alarm system, payment deadlines etc.) to you and your Assigned Users who have the Verisure App.

GPS position and Geo-location: We process the GPS position of protected locations in order to, for example, dispatch a private security guard as quickly as possible.

Where you have consented, we may track the GPS position of your mobile device to provide you with the @Home SOS service, allowing us under some conditions to process an SOS signal launched from your Verisure App, and/or send you push notifications relevant to your location. You can turn off your mobile device's geolocation at any time from your device settings (in which case you will not be able to take advantage of all the services offered by the app). Geo-location relies on default maps SDKs, such as Google Maps SDK to geo-localise the device.

The Verisure App uses the map service Google Maps for users from the United Kingdom or the Republic of Ireland from Google Ireland Limited. If you visit the Google Maps service on the Verisure App whilst you are logged into your Google profile, Google can also link this event to your Google profile. You can object to this data collection by contacting Google.

The Verisure App may integrate videos and image content which are stored on YouTube, LLC and/or Vimeo Inc. When visiting a page containing this content, data relating to your access to the page is shared with YouTube, LLC and/or Vimeo Inc.

When installing the Verisure App, necessary information is transferred to the respective app store (username, email address and your account’s customer number), the time of download and the individual device identification number. We have no control over this data collection and are not responsible for it.

Contact details of the Residential Customer such as name, telephone number, postal address, and email address.

Contact details of the Residential Customer, Assigned Users or Emergency contacts such as name and telephone number.

Username, password and account details including account number and service payments.

Standard technical data such as IP address of the device used, date and time of request, operating system details, location, the ISP, online identifiers (e.g. device identifiers, session IDs) etc,

Personal data related to cookies used. Please refer to our Cookie Policy for further details.

The processing is necessary for the performance of the contract with the Residential Customer (Article 6.1.b UK GDPR).

The processing is based on Verisure’s legitimate interest to enable the use of the Verisure App and Verisure services, facilitate the functionality and safety of Verisure’s systems, and provide product recommendations (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Personal data is retained for the duration of the contract and for a period of up to 6 years after the termination of the contract.

We offer online web shop platforms to provide our product assortment for direct sale to customers.

Account details for placing an order including customer contact details such as name, email address, phone number, password of choice, financial details for payment.

For performance of a contract (Article 6.1.b UK GDPR), as you as a customer agree to our Terms and Conditions to establish the sale of goods.

The account details are maintained for the period of an active customer account and after termination of a customer account in accordance with applicable law in order to meet consumer law obligations applying to our provision of service and queries.

We may market our Services to you via email, post, SMS or telephone. Further, we may use customised online advertising to market our Services. If you do not wish to receive direct marketing, you may always object to this by using the “unsubscribe” link in our communications or by contacting us via [email protected].

Please refer to Verisure’s website Privacy Policy for more information on Verisure’s direct marketing practices.

When it comes to customised online advertising, we may share your personal data with third parties acting as data controllers, joint controllers together with Verisure or as independent data controllers. For example, we use analytics tools to provide relevant marketing online.

In some specific situations, we may contact you to ask if we may share a "Good story" as part of our marketing efforts. "Good stories" are short stories about how our Services have led to a particularly good customer experience. We will never share information about you unless we have personally and explicitly agreed to sharing your ”Good story”.

Contact details of the Residential Customer such as name, telephone number, postal address, and email address.

Information which is included in the underlying quote such as description of the Residential Customer’s property and number of Assigned Users in the household.

Demographic data, such as age and area of your residence.

Behavioural data, such as which emails you have opened, which links you have chosen to click on and an IP address.

The processing is based on Verisure’s legitimate interest to market its services to Verisure’s existing Residential Customers (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The processing is based on your consent where you have consented to Verisure marketing its services to you (Article 6.1.a UK GDPR).

You can withdraw your consent at any time, by using the “unsubscribe” link contained in our marketing emails or by contacting us via [email protected].

Personal data is stored and used throughout the contractual relationship and up to 6 months after the contractual relationship ends.

When may use your data for market and opinion research purposes. In principle, we evaluate the data anonymously for internal purposes. If, exceptionally, surveys are not evaluated anonymously, the data will only be collected with your consent.

We use your personal data, such as data derived from statistical compilations, market segmentations and satisfaction surveys for the purposes of conducting marketing analyses. The results of our analyses are used to improve our customer service, to offer new solutions or to adapt our website and/or app, improving, replacing and developing new products and services, processes or working methods with the goal of developing our business, and to improve our standards.

Participation in this market analysis will be based on Verisure’s legitimate interest to conduct market research and similar practices.

We use various third-party providers of satisfaction surveys including Medallia, Kantar etc.

We may use your personal data for marketing personalisation (creating marketing profiles in order to understand preferences in relation to our products and services, and to deliver personalised advertising), list-based matching via social media providers such as Facebook, (to show our adverts on their platform), lookalike matching and matching activity with the following third parties: Meta Platforms, Nextdoor, TikTok and Snapchat.

We may contact prospective customers who you have referred to Verisure. Please ensure that you have obtained their consent prior to providing their personal data to Verisure.

Contact details of the Residential Customer such as name, telephone number, postal address, email address and IP address.

The categories of personal data we process for business development include contact details, demographic data, etc.

Contact details of the Residential Customer’s referred individual such as name, telephone number and email address.

The processing is based on Verisure’s legitimate interest to promote and improve its products and services, as well as to administer and analyse its marketing strategies (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The processing is based on your consent where you have consented to Verisure marketing its services to you (Article 6.1.a UK GDPR).

You can withdraw your consent at any time, by using the “unsubscribe” link contained in our marketing emails or contacting us via [email protected].

Personal data is stored and used throughout the contractual relationship and up to 6 months after the contractual relationship ends.

We may need to process personal data in order to comply with our legal obligations.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing of personal data is necessary for the performance of Verisure's legal obligations (Article 6.1.c UK GDPR)

The personal data is retained for as long as necessary to comply with the applicable legal obligation.

In the event that Verisure is restructured, e.g. split into several different businesses, or if a merger occurs, the new company may continue to use your personal data for the same purposes as we have stated in this Privacy Notice, unless you receive different information in connection with the restructuring or merger.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing is based on Verisure’s legitimate interest to enable a restructuring process or a merger (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

If Verisure ceases to exist through a merger, or in the event of restructuring, we will erase the personal data as long as the retention of such personal data is not required by law.

In other cases, your personal data will be processed in accordance with this Privacy Notice.

We may need to process your personal data in order to protect our legal interests in the event of a dispute, such as to establish, exercise or defend legal claims.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing is based on Verisure’s legitimate interest to protect our legal interests in the event of a dispute (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is retained for as long as they are needed to establish, exercise or defend a legal claim, in any event, for a maximum of 6 years after the termination of the contract.

Personal data is collected via Verisure devices to ensure the functioning of the Services as well as to enable detection of alarm triggering events contributing to the safety and security of the Residential Customer and other individuals in the monitored premises.

Personal data collected during an on-going alarm triggering event, such as pictures, video, and audio from the monitored premises.

Residential Customer and/or Assigned Users in real time during an alarm triggering event in the Verisure App in case such technology settings are available to the Residential Customer.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

The processing is based on Verisure’s legitimate interest to provide Services to the Residential Customers and the Residential Customer’s legitimate interest to ensure security of their home (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s and the Residential Customer’s legitimate interests outweigh the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Personal data collected during an on-going alarm triggering event are stored for a period of 90 days from the alarm triggering event unless the data is required under sub-section 4.3.

We process personal data to verify the cause of an alarm triggering event.

During the management of an alarm triggering event Verisure processes personal data and may for example:

- identify authorised persons detected in the monitored premises with the help of code words and

- share personal data with a privacy security company, the law enforcement or other emergency services.

Depending on the type of devices installed, Verisure process images and video recordings of the monitored premises. Image capture and video recording take place without storage. When an alarm is triggered, photos are shot from Verisure installed cameras and transmitted to the ARC. Only certain Verisure employees have access to these images and if there is not alarm trigger, it is not possible for Verisure employees to view the video/images from your camera.

- In the event of an alarm triggering event, Verisure will record Residential Customer’s GPS location to determine whether or not they are at the monitored premises at the time of the alarm.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises. The real-time monitoring during an alarm triggering event may entail that sensitive personal data such as signs of a natural person’s health condition appear in the content.

The processing is based on Verisure’s legitimate interest to provide Services to the Residential Customers and the Residential Customer’s legitimate interest to ensure security of their home (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s and the Residential Customer’s legitimate interests outweigh the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Sensitive personal data:

In the exceptional situations where health information or other sensitive personal data is processed during an on-going alarm triggering event, sensitive personal data may be processed based on the exemption relating to the vital interests of the data subject or another natural person (Article 9.2.c UK GDPR).

Personal data collected during an on-going alarm triggering event are stored for this purpose for a period of 90 days from the alarm triggering event unless the data is required under sub-section 4.3.

We follow up previously managed alarm triggering events by contacting the Residential Customer to ensure that the management of the alarm triggering event was as efficient as possible and to receive information which could be relevant for any future alarm triggering events.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on Verisure’s legitimate interest to provide Services to the Residential Customers and to follow-up and ensure as efficient provision of the Services as possible (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Personal data collected during an on-going alarm triggering event are stored for this purpose for a period of 90 days from the alarm triggering event unless the data is required under sub-section 4.3.

Other personal data is stored for a period of up to 90 days from the alarm triggering event unless the data is required under sub-section 4.3.

We process personal data to maintain our compliance with legal (consumer) obligations.

Past customer contact details as submitted originally for entering into the contract

The processing is necessary for Verisure’s compliance with legal obligations with customers (Article 6.1.c UK GDPR).

The personal data is retained for a period of up to 6 years after the termination of the contract.

We process personal data when we provide the support which is requested by the Residential Customer relating to the contract, the Services or the technical functioning of the installation.

We also process personal data when we manage other requests, such as requests to exercise the rights of a data subject.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on Verisure’s legitimate interest to provide support to the Residential Customers (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is retained for the duration of the customer service matter and for a period of up to 90 days unless the data is required under sub-section 4.3.

To be able to provide the Residential Customer with relevant information in case of insurance or other legal claims, we store personal data and the Residential Customers’ requests in an archive with appropriate access restrictions.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on the Residential Customer’s legitimate interest to have access to necessary information in order to handle insurance claims or other legal claims (Article 6.1.f UK GDPR).

Our assessment is that the Residential Customer’s legitimate interests outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

Once we remove the Residential Customer’s personal data from the internal database available to the customer service agents, we maintain the personal data collected during an on-going alarm triggering event with accompanying details in an archive with appropriate access restrictions for a period of time to support customers where evidence is required for insurance or other claims based on what practically is deemed a reasonable timeline for receiving such inquiries from customers and the time needed for insurance companies to handle such claims.

Depending on the nature of the complaint, we may for example investigate how an alarm triggering event was handled to ensure it was properly conducted.

Personal data collected during an on-going alarm triggering event , such as pictures, video, and audio from the monitored premises.

Miscellaneous information provided to the ARC and noted by the alarm operator during an on-going alarm triggering event.

The processing is based on Verisure’s legitimate interest to handle and investigate customer complaints (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

We maintain the personal data collected during the handling of a complaint for a period of 3 years from the date of settlement or closure of the complaint.

We may, when necessary, assist law enforcement or regulators where a legal obligation to provide assistance applies or such cooperation is otherwise motivated and based on a formal and written request for information.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises.

Other information requested by law enforcement or a regulator which Verisure must share or otherwise considers is necessary to share.

Processing is necessary to comply with a legal obligation (Article 6.1.c UK GDPR) or

The processing is based on Verisure’s legitimate interest to assist law enforcement or regulators in case they receive a formal and written request for information (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s or other affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

For as long as is required under applicable law.

We perform analyses of previous alarm triggering events to ensure efficient and correct management of alarm triggering events.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises.

The processing is based on Verisure’s legitimate interest to investigate and ensure that the Services have been provided in the correct manner (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s and other affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is processed for a period of up to 6 years after the termination of the contract.

We perform analyses of previous alarm triggering events to ensure efficient and correct management of alarm triggering events.

Any personal data used for the purpose of training Verisure’s personnel will be pseudonymised so that the natural persons are not identifiable to the personnel.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises in strongly pseudonymised format.

The processing is based on Verisure’s legitimate interest to train its personnel and thus ensure the highest possible level of Service (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s and other affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is processed for a period of up to 6 years after the termination of the contract.

We process personal data to further develop our Services, for example by making our devices more precise, improving the customer experience etc.

Any personal data used for the purpose of developing Verisure’s Services will be pseudonymised so that the natural persons are not identifiable to personnel.

Personal data collected during an on-going alarm triggering event , such as pictures, video and audio from the monitored premises in strongly pseudonymised format.

The processing is based on Verisure’s legitimate interest to develop their Services and thus ensure the highest possible level of Service (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the Residential Customer’s and other affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is processed for a period of up to 6 years after the termination of the contract.

We may need to process personal data in order to comply with our legal obligations.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing of personal data is necessary for the performance of Verisure's legal obligations (Article 6.1.c UK GDPR)

The personal data is retained for as long as necessary to comply with the applicable legal obligation.

In the event that Verisure is restructured, e.g. split into several different businesses, or if a merger occurs, the new company may continue to use the personal data for the same purposes as we have stated in this Privacy Notice, unless you receive different information in connection with the restructuring or merger.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing is based on Verisure’s legitimate interest to enable a restructuring process or a merger (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

If Verisure ceases to exist through a merger, or in the event of restructuring, we will erase the personal data as long as the retention of such personal data is not required by law.

In other cases, your personal data will be processed in accordance with this Privacy Notice.

We may need to process your personal data in order to protect our legal interests in the event of a dispute, such as to establish, exercise or defend legal claims.

All categories of personal data processed for the purposes described in this Privacy Notice.

The processing is based on Verisure’s legitimate interest to protect our legal interests in the event of a dispute (Article 6.1.f UK GDPR).

Our assessment is that Verisure’s legitimate interest outweighs the affected data subjects’ interests and fundamental rights relating to protection of personal data.

Please contact us if you would like to receive more information about our legitimate interest assessment.

The personal data is retained for as long as they are needed to establish, exercise, or defend a legal claim, in any event, for a maximum of 6 years after the termination of the contract.